Technical Information
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%PROGRAMDATA%\explorer.exe" "explorer.exe" ENABLE
- %TEMP%\x.exe
- %TEMP%\xx.exe
- %PROGRAMDATA%\explorer.exe
- 'si#####ee.duckdns.org':2020
- DNS ASK si#####ee.duckdns.org
- '%TEMP%\x.exe'
- '%TEMP%\xx.exe'
- '%PROGRAMDATA%\explorer.exe'
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%PROGRAMDATA%\explorer.exe" "explorer.exe" ENABLE' (with hidden window)